# utils/tools/__init__.py

# --- 将所有工具函数提升到 utils.tools 命名空间 ---

# 从外部威胁情报模块导入
from .external.threat_intel import (
    is_public_ip,
    query_otx_indicator,
    query_virustotal_indicator,
    query_apivoid_indicator,
    query_threat_intelligence
)

# 从内部情报模块导入
from .internal.asset_query import query_asset_info
from .internal.security_logs import query_attack_history
from .internal.ua_analyzer import analyze_user_agent
from .internal.dga_detector import detect_dga_domain
from .internal.weak_credential_detector import check_weak_credentials
from .internal.malicious_referrer_detector import is_malicious_referrer

# --- 定义 __all__ 以便 `from utils.tools import *` 可以按预期工作 ---
__all__ = [
    # External
    'is_public_ip',
    'query_otx_indicator',
    'query_virustotal_indicator',
    'query_apivoid_indicator',
    'query_threat_intelligence',
    
    # Internal
    'query_asset_info',
    'query_attack_history',
    'analyze_user_agent',
    'detect_dga_domain',
    'check_weak_credentials',
    'is_malicious_referrer'
]
